ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2020.0441
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2020-0441)
Resumen:	The remote host is missing an update for the 'webkit2' package(s) announced via the MGASA-2020-0441 advisory.
Descripción:	Summary: The remote host is missing an update for the 'webkit2' package(s) announced via the MGASA-2020-0441 advisory. Vulnerability Insight: The webkit2 package has been updated to version 2.30.3, fixing several security issues and other bugs. A type confusion issue may lead to arbitrary code execution with a maliciously crafted web content, fixed with improved memory handling (CVE-2020-9948). An use after free issue may lead to arbitrary code execution with a maliciously crafted web content, fixed with improved memory management (CVE-2020-9951). An out-of-bounds write issue may lead to code execution with a maliciously crafted web content, fixed with improved bounds checking (CVE-2020-9983). An use after free issue may lead to arbitrary code execution with a maliciously crafted web content, fixed with improved memory management (CVE-2020-13543). An use after free issue may lead to arbitrary code execution with a maliciously crafted web content, fixed with improved memory management. (CVE-2020-13584). Affected Software/OS: 'webkit2' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-13543 https://security.gentoo.org/glsa/202012-10 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1155 https://www.oracle.com/security-alerts/cpuapr2022.html Common Vulnerability Exposure (CVE) ID: CVE-2020-13584 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BY2OBQZFMEFZOSWXPXHPEHOJXXILEEX2/ https://talosintelligence.com/vulnerability_reports/TALOS-2020-1195 Common Vulnerability Exposure (CVE) ID: CVE-2020-9948 Debian Security Information: DSA-4797 (Google Search) https://www.debian.org/security/2020/dsa-4797 http://seclists.org/fulldisclosure/2020/Nov/18 https://support.apple.com/HT211845 http://www.openwall.com/lists/oss-security/2020/11/23/3 Common Vulnerability Exposure (CVE) ID: CVE-2020-9951 http://seclists.org/fulldisclosure/2020/Nov/20 http://seclists.org/fulldisclosure/2020/Nov/19 http://seclists.org/fulldisclosure/2020/Nov/22 Common Vulnerability Exposure (CVE) ID: CVE-2020-9983 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PDGBNKYT7NMW7CJ26YFUPUHPJVYGV7IQ/
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.